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Abstract 

This work is motivated by a challenging problem of computer-aided derivation of multiscale mod- 
els of arrays of micro- and nanosystems. In this domain a model is a partial differential equation. 
Multiscale methods approximate it by another partial differential equation. The challenge is to 
formalize these approximating methods within a computer algebra system, e.g. Maple™ . Since 
most of the transformation steps correspond to equational reasoning (i.e. symbolic transfor- 
mations based on equalities) we address the question of extending Maple with rewriting and 
strategies. Our contribution consists in transferring most of the term rewriting concepts and 
techniques to the symbolic computation community. We provide a Maple package for rule-based 
programming and its combination with standard Maple code. We illustrate its practical interest 
by applying the package functions to provide a formal proof of a convergence property of a 
two-scale operator. 
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1. Introduction 

The context of this work is the design of microsystem array architectures, including mi- 
crocantilevers, micromirrors, droplet ejectors, micromembranes, microresistors, biochips, 
etc to cite only a few. The numerical simulation of such whole arrays based on classical 
methods like the Finite Element Method (FEM) is prohibitive for today's computers (at 
least in a time compatible with the time scale of a designer). The calculation of a rea- 
sonably complex cell of a three-dimensional microsystem requires about 1000 degrees of 
freedom which lead to about 10 000 000 degrees of freedom for a 100 x 100 array. Fortu- 
nately there is a solution consisting in approximating the model by a multiscale method. 
The resulting approximated model is rigorously derived from the exact one through a 
sequence of formal transformations that differs for each case. A great challenge is to 
generalize these formal computations and to automate them. 

Roughly speaking, a microsystem array model is composed of a partial differential 
equation on some spatial region and conditions on its boundaries. Multiscale methods 
approximate this model by another partial differential equation. Most of the transfor- 
mations performed by multiscale methods are based on quasi-systematic derivations of 
equalities. The classical way to automate these derivations is to consider mathematical 
expressions as symbolic and to give a computational meaning to mathematical equations. 
The idea is to orient the equality x = y into a rewrite rule which states that every 

occurrence of an instance of x can be replaced with the corresponding instance of y. 
Consequently equational derivations are reduced to a series of term rewritings. 

Term rewriting provides a theoretical and computational framework which is very 
useful to express, study and analyze a wide range of complex dynamic systems. It is 
characterized by a repeated transformation of a data object such as a word, term or 
graph. Transformations are described by a combination of rules which specify how to 
transform an object into another one in the presence of a specific pattern. Rules can 
have further conditions and can be combined by specifying strategies. The latter control 
the order and the way the rules are applied. Term rewriting is used in semantics in order 
to describe the meaning of programming languages as well as in program transformations. 
It is used to perform symbolic computations like in Mathematica, and also to perform 
automated reasoning. It is central in systems where the notion of rule is explicit such as 
expert systems, algebraic specifications, etc. 

The computer algebra system Maple™ is widely used in the symbolic computation 
community and is imposed by members of our project for a prototypal implementation 
of the algorithmic aspects of multiscale methods. Maple is a suitable language for com- 
bining function-based and rule-based symbolic transformations. Unfortunately, it is only 
equipped with a limited rewrite kernel, namely the function applyrule (rule , expr) . The 
main drawback of applyrule is that it iterates the application of the rule everywhere 
in the given expression until no matching sub-expression remains. Therefore there is a 
lack of flexibility, the user cannot express how and where rules must be applied. Another 
drawback is that there is no straightforward way to rewrite terms with variable function 
symbols (we would like to write /_(...) where /_ is not a fixed symbol but a variable 
that ranges over a set of function names). 
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Contributions 



In this work we give a good amount of rewriting features to Maple. We provide a trans- 
formation language called symbtrans that combines rules, strategies and Maple functions. 
The point is to make all the basic ingredients of term rewriting explicit, in particular 
the notions of rule, explicit application of the rule, and the result. Thanks to the abil- 
ity of the host language Maple to perform functional programming, our transformation 
language is built up from a pure functional point of view. A rewrite rule is a determin- 
istic function that might raise an exception if the rule is not applicable. Those functions 
can be combined to define higher-order strategies. We illustrate the practical interest of 
our transformation language by applying it to provide a formal proof of a convergence 
property of a two-scale operator. 

The transformation steps involved in this particular case are general enough to be 
applied to much more complicated models. This good level of generality is reached thanks 
to the powerful transformation combinators provided by symbtrans. 

Related work 



Our transformatio n language is an adapt ation for Maple of popular stra tegy lan- 
guages such as p-\og (jMarin and Piroil l|2004l )) or Tom (jBalland et all (|2007[) ). A con- 
ceptual difference is that Tom extends a host language with an additive syntax, whereas 
our transformation language smoothly integrates with standard Maple functions. The 
first work that consider ed term rewriting from a functional point of view is Elan, see 
Borovanskv et alj (|200lh . within a non-deterministic framework. Our transfo rmation lan- 
guage is comparable with the deterministic part of the rewriting calculus, see lCirstea et al 
(|200lh . 



Paper outline 

Section 2 gives necessary term rewriting concepts and notations, and an introduction 
to the two-scale transform. Section 3 introduces the transformation language symbtrans, 
namely the basic transformations and a useful set of transformation combinators. They 
are illustrated through several examples. Section 4 is devoted to give a computational 
version of the notion of convergence - in the sense of the two-scale transform - and its 
properties. Some problems connected with the evaluation strategy of Maple are pointed 
out and solved. Section 5 shows the transformation language at work on a realistic exam- 
ple. The mathematical proof of the weak convergence property of the gradient operator 
(reproduced in Appendix A) is indeed completely translated into a formal proof (repro- 
duced in Appendix B) thanks to rules and transformations (reproduced in Appendix C). 
Section 6 compares the present work with related ones and Section 7 concludes. 



2. Preliminaries and notations 

2.1. Term, substitution, matching and rewriting 

Term rewriting systems (in the classical sense) are defined by specifying a set of terms 
and a set of rewrite rules. Those rules are applied to reduce terms. In general the process 
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of reduction continues until no more rule can be applied, or forever in the case of non- 
terminating systems. The final term where no more rule can be applied is called a normal 
form. If there is always a unique normal form then the system is said to be confluent. 

Let J 7 be a countable set of function symbols, each function having a fixed arity. Let 
X be a countable set of variables. T(J r , X) is the set of terms defined in the usual way. 

If x € X then x G T{F, X). And if ti, ■ ■ -t n G T{T, X) are already constructed terms, 
then t(ti, ■ ■ ■ , t n ) G T(T ', X) where n is the arity of t. Notice that when n = then t is 
called a constant. 

The set of variables that occur in a term t is denoted by Var{t). If Var{t) = then 
t is said to be closed. A substitution is an assignment from X to 7(T, X) denoted by 
a = {xi i y t\ , ■ * * ,x„ i-> t n }. If t is a term then cr(t) is the term that results from the 
application of a to t. 

A rewrite rule is an object of the form I — > r where I and r are terms in T{T, X) s.t 
Var{r) C Var(Z). 

Definition 1. A matching is a statement of the form t' <C £ where i' and i are terms in 
T(T X). A substitution a is a solution of this matching iff er(i') = t. The application of 
the rewrite rule Z — > r to a term t, denoted by [I — > r](t), is defined by a(r) where a is a 
solution of I <C i. 

Example 2. Consider J"o = {a, b} (resp. J2 = {/, g}) a set of symbol functions of arity 
(resp. arity 2), and x,y variables in X. 

• [x — > b](f(a, 6)), the result of this rule application is the term b, with the substitution 
a = {x^ f(a,b)}. 

• [f(x, a) — > g(a, x)](f(b, a)) yields the term g(a,b), with a — {x M> b}. 

• [a — > 6] (a) yields the term 6, with c = 0. 

It is worth to mention that there is a difference between the notions of variables, 
functions and constants in the classical mathematical sense and in the sense of term 
rewriting when mathematical expressions are viewed as terms. 

Let us give a concrete example. Consider the mathematical expression 



The term associated to it is Integral (Omega, f (x) ,x). Notice that in this term, x and 
Omega are viewed as function symbols of arity (i.e. constants), f as a function symbol 
of arity 1, and Integral as a function symbol of arity 3. Further clarifications on this 
topic can be found in Section 3. 

2.2. Running example 

We illustrate our method on the simplest relevant problem in partial differential equa- 
tion, namely the diffusive equation. It appears in a number of physical modelings such as 
the heat equation, the equation of electrostatics, the model of thin elastic beam in torsion, 
etc. Here, we consider a stationary distribution of temperature in a region 57 C W 1 (where 
n G {1, 2, 3}) with an internal heat source and with imposed vanishing temperature along 
the boundary. The diffusion coefficient a £ : R™ — > R is assumed to be periodic on 51 in 
the n directions, with a small period e. In other words, there is a function a : R" — >• R 
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which is (0, l)™-periodic and such that a £ (x) — a(x/e) for x € f2. In view to derive the so- 
called homogenized model, the parameter e is considered as small, and we are interested 
in finding an approximation of the thermostatic equation when e decreases to zero. In 
this mathematical asymptotic process, the distributed internal heat source f £ : R™ — > R 
can be considered as depending on e, and the temperature distribution u £ : l n — > R, 
vanishing on the boundary dfl of il, is the unique solution to the stationary heat equation 

(1) 



a £ Vu £ Vv dx = f E v dx 
in Jn 

written under its variational form lDautrav and Liond (|l990h . Here, v : Q — » M is called a 
test function. It can be any sufficiently regular function vanishing on dQ. 

To conduct the asymptotic process e — > while keeping as much information as 
possible in the solution u £ at the small scale, the region fi is unfolded into the product 
fi X (0, 1)" through a process called two-scale transform or unfolding. This sort of change 
of variables is applied to the sequence u £ : fl — >• R which yields another sequence of 
functions Tu £ : (1 X (0, 1)™ — > R. We can show that the latter converges to a limit 
u°(x,y), so we say that the sequence u £ is two-scale convergent to u°. Similarly, a e , Vu £ 
and f £ are two-scale convergent towards some limits a, f° and V x u° + VyU 1 , where u° 
is independent of the so-called microscopic variable y and is vanishing on dQ. Then, 
applying the two-scale transform in the variational formulation (1), passing to the limit 

£ -> 0, 



and eliminating u 1 , we end to the homogenized model satisfied by u" 



(\7 x u a ).[a H V x v°] dx 



f H v° dx 



(2) 



for all v° sufficiently regular test function vanishing on dil. Here a H is the n x n matrix 
of effective diffusion coefficients, and f H is the effective heat source. 

The state ment of the appro ximated model (2) derived with the two-sc ale transform was 

annou n ced in Lencznerl (Il997l) , then several proofs hav e been published in Lenczner and Senouci-Bereksi 

( 19991). ICasado Diaz! ||20 00|). ICiora nescu et alj (l2002h. iLenczner and Smith! (120071) . and 

Cioranescu et al.l (]2008f ). Here we follow the paper ILenczner and Smith! (|2007l ) where an 

effort has been made to formulate proofs in a modular form and to avoid any abstract 

reasonning in the sequences of formal transformations. The steps in this formal method 

are rigorously specified at a high level of generality, that make them independent of the 

domain geometry and applicable to other equations. The proof is organized in four parts. 

The two first consist in dealing separately with the two-scale convergence of Vu £ and 

with the choice of test functions. Then, the results are assembled to derive the two-scale 

model. Finally, the part u 1 of the solution is eliminated to yields the homogenized model 

(2). In this paper, we focus on the derivation of the two-scale limit of Vu e b ecause it 

i s a ge neric and key point in the method. As it is well underlined in the paper IVisintin 

(2007), ;he proof can be generalized to any first-order operators, and so to be used for a 

broad range of mathematical models governed by partial differential equations arising in 

many fields. 

Before to state the property of two-scale convergence of a gradient, we introduce some 
notations. For any region 8, L 2 (0) denotes the set of square integrable functions in 0, 
that is the set of functions v : — > R with a bounded L 2 (0)-norm 



II" 



(0) 



v 2 (x) dx. 
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The set (0, 1)™ of the microscale variables is denoted by Y, and a function v : Y — »■ R is 
said to be F-periodic if v(y + ) = v(y~) for any oposite points y + and y~ of the boundary 
of Y. A sequence u £ : D, c M™ — > M is said to be two-scale weakly convergent towards 
u° : ft x Y -> M in L 2 (ft x F) if 

/ (Tu e (x,y) - u°(x,y)).v(x,y) dxdy = 0(e) for any v = (ui,..,u„) G £ 2 (ft x Y)", 

where 0(e) is any sequence tending to zero when e — > 0. The notations and V a refer 
to the gradient with respect to the variables x and y respectively. 

Proposition 3. For a sequence of functions u £ : ft — > R swc/i £/ia£ u e and Vu e are 
bounded in the L 2 (Q)-norm, if we admit that Tu £ has a formal expansion on the form, 

T(u e ) = u° + SU 1 + sy.V x u° + eO{e), (3) 

then u £ and Vti e are two-scale weakly convergent towards u° and Vx^+VyU 1 respectively 
in L 2 (ft x Y). In addition, u° is independent of y and y M> is Y -periodic for all 

x. 

We observe that the expansion (3) is introduced as an assumption in the stratement, 
to simplify the proof. 

3. Transformation language 

This section formally defines a transformation language based on the three notions of 
rule, strategy and transformation. By a rule we mean a classical rewrite rule. A strategy 
is a way to control how rules are applied. Strategies can be combined with each other 
to define strategies with a finer control or a more powerful effect. We propose easy-to- 
remember names for the most popular - and indeed most useful - strategy constructors 
and combinators. The user can also define her own strategies by defining new Maple 
functions. 

Strategies (and rules, as basic strategies) apply to expressions of a given formal lan- 
guage and transform them into other expressions in the same language. In the model- 
driven engineering community they would be called "endogeneous transformations". More- 
over it is not obvious that any natural transformation of mathematical models can be 
concisely expressed as a rewriting-based strategy, in a natural way. Therefore we ad- 
ditionally consider a notion of transformation, potentially more general than the one 
of strategy, and independent of any peculiar specification or programming paradigm. 
Transformations should satisfy the following three properties: (i) a transformation is re- 
producible, (ii) a transformation may not progress, and (iii) a transformation may not 
terminate. The reproducibility property (i) means that the application of a transforma- 
tion to a given expression always has the same effect: either it always do not termi- 
nate, or it always produces the same expression. In particular, this property excludes 
non-determinism from the notion of transformation. It would be enriching to develop a 
complete theory of transformations of mathematical models by it exceeds the scope of 
the present paper on rule-based transformations. 

We propose an implementation of this transformation language as a new package for 
the Maple computer algebra system. The package is named symbtrans, for "symbolic 



6 



transformations". We strongly rely on the functional features of Maple by providing 
rules, strategies and transformations as Maple functions, possibly through higher-order 
functions constructing them from another representation. Functions faithfully provide 
the expected feature (i) of transformation reproducibility. Feature (ii) is implemented in 
Maple by the mechanism of exceptions. Feature (iii) is left under the responsability of 
users that can interrupt execution with the Maple function timelimit. 

3.1. Top rewriting 

The Maple statement ruleName : = [I ,r] declares the rewrite rule I — > r as a pair and 
assigns it the name ruleName. The function Transform turns the pair ruleName into the 
transformation function Transform (ruleName ) . Given a term t, the rewrite rule I — > r 
is applied, see Definition 1, on t by the function application Transf orm(ruleName) (t). 
If the rule cannot be applied i.e. if t does not match its left side I, then the exception 
"Fail" is raised. This is the standard rewriting at the top strategy. 

Example 4. Consider the property J v + w dx = J v dx + J w dx of linearity of the 
integral. The rewrite rule corresponding to its application from left to right can be defined 
with symbtrans as the pair 
IntegralLinearity := [ 

Integral (A_ + B_, C_) , 

Integral (A, C) + Integral (B, C)] ; 
A convention in the package is that variable names end with " _ " in order to distinguish 
them from constants. In order to apply the IntegralLinearity rule at the top to the 
term 

t := Integral (v(x)+w(x) ,{x}) ; 
we write Transf orm(IntegralLinearity) (t). The resulting term is 
Integral (v(x) , {x}) + Integral (w(x) , {x}) 

3.2. Elementary transformations 

The two elementary transformations Identity and Fail are defined as follows. 

Identity (t) =<j e /t 

FailO =def error "Fail" 

The first one has no effect, since it transforms t into itself. The second one always fails 
and raises the exception "Fail". This exception is raised each time a transformation fails 
transforming a term. What is a failure for a transformation has to be defined for each 
transformation, as previously done for top rewriting. 

It is sometimes useful to consider the non-progress of a transformation as a failure 
with the aim to handle this exception and enable other transformations. This feature is 
realized by the transformation combinator IdentityAsFail defined by 

IdentityAsFail (s) (t) =def 11 s(t) = t then FailO; 

else s (t) ; 

for any transformation s and any term t. 
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Conversely, it is also convenient to hide at some higher level the exception "Fail" 
raised by a transformation s. This is the purpose of the FailAsIdentity combinator: 

FailAsIdentity(s) (t) =d e f try s(t) ; 

catch "Fail" : t; 

3.3. Traversal transformations 

This section introduces transformations called traversal or term transformations. These 
transformations explore the structure of the term they are applied on. We provide three 
traversal transformation constructors: All, TopDown and BottomUp. 

The transformation All (s) applies the transformation s to all the immediate subterms 
of any term t : 

All(s) (t) = de f if t=t' (ti,- • • ,t„) then 

t' (FailAsIdentity(s) (ti) ,• • • .FailAsIdentity (s) (t„) ) 
else // t is a constant or a variable 
t; 

Example 5. Consider again the rewrite rule IntegralLinearity of the example 4, 
encoding the linearity of the integral, and let t — J v(x) + w(x) dx. Notice that the 
statement 

Transform (IntegralLinearity) (t+2) 
raises the exception "Fail" because the rewrite rule cannot be applied at the top of the 
expression t+2. A solution is to replace it by the statement 

All (Transf orm(IntegralLinearity) ) (t+2) 
which produces J v(x) dx + J w(x) dx + 2 since the expression t+2 is viewed as the term 
+(t,2). 

The transformation TopDown (s) applies the transformation s to all the subterms of 
any term t, at any depth, by starting with the closest subterms to the root of t: 

TopDown(s) (t) =def if t=t ' (ti , • • • ,t n ) then 
try s(t) ; 

catch "Fail": t ' (TopDown(s) (ti) , • • • ,TopDown(s) (t„) ) ; 
else // t is a variable or a constant 
FailAsIdentity(s) (t) ; 

Example 6. Let t = J v(x) + w(x) dx. Then 

TopDown (Transf orm(IntegralLinearity) ) (t*t+2) 

gives the expression (J v(x) dx + J w(x) dx) * (J v(x) dx + J w{x) dx) + 2, since the 
expression t*t+2 is viewed as the term +(*(i,t),2). 

The transformation BottomUp(s) works as the transformation TopDown(s) , but in the 
opposite direction, i.e. it applies first the transformation s to the most distant subterms 
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from the root: 



BottomUp(s) (t) —def if ExistChild(s ,t) then 

AlKBottomUp(s)) (t) ; 
else 

FailAsIdentity(s) (t) ; 



where ExistChild(s ,t) returns true iff t has a proper subterm - i.e. distinct of t - on 
which s can be applied. 

The transformation BottomUp(s) is not used in the proof reproduced in Appendix B. 
However it is very common in practice; most of the programming languages evaluate 
the arguments of a function before evaluating the function itself. Moreover, including it 
in symbtrans puts its strategy language at the same level of expressiveness as the Tom 
strategy language, see lBalland et al.1 (|2007l ). in terms of transformation constructors. 



3.4- Transformation combinators 

In this section we define three transformation combinators. They help defining complex 
transformations by combination. They do not depend on the nature and structure of the 
expression they are applied on. These combinators are very important because they allow 
specifying the order of transformations. 



LeftChoiceC [si, s„])(t) 


= de /try si(t) ; 






catch "Fail" :LeftChoice( [s 2 , •• 


• , s„])(t) 


LeftChoiceC [] ) (t) 






Comp( [si, • • • , s„] ) (t) 


= de /Comp( [s 2 , s„])(si(t)); 




Comp([])(t) 


—deft; 




Normalizer (s) (t) 


= d e /if s(t) = t then t; 

else Normalizer (s) (s(t)) ; 





The combinators LeftChoiceC [s] ) and CompC [s] ) are defined by induction on n > 
for any sequence of transformations s = (si)^^...^. If n = 0, both do nothing. Otherwise 
the combinator LeftChoiceC [s] ) returns the result SiCt) of the application of the first 
transformation in the sequence s which succeeds on the term t. If n > 1 the combi- 
nator CompC [si, • • • , s„] ) applies first si, and either fails or applies CompC [s2, • • • , 
s„] ) to the resulting term. The combinator Normalizer Cs) iterates the application of 
s until a fixed point is reached. Notice that the definition of Normalizer above is just a 
specification. For more efficiency, the real implementation computes sCt) just once. 

Example 7. Let t = j v(x) + w(x) + z(x) dx; the statement 

Normalizer CTopDownCTransf ormClntegralLinearity) ) ) it) 
applies the rule IntegralLinearity to t in a top-down way until no further application 
is possible. The resulting term is J v(x) dx + J w(x) dx + J z(x) dx. Notice that the 
statement 

Normalizer CTransf orm( IntegralLinearity) ) (t) 



9 



produces the exception "Fail" because it applies IntegralLinearity to t once at the 
top, and then fails. 

In this paper these combinators are mainly used to express the theory of convergence 
calculus, see Section 4 for details. Transformation combinators are good candidates to 
increase the automation of two-scale methods. 

3.5. Contextual transformations 

When dealing with the proof of the gradient weak convergence property (Appendices 
A and B), we have faced situations where rule application depends on the context of 
a subterm. We distinguish two notions of context: (i) the inner context - where some 
conditions are imposed on some descendant of the subterm - and (ii) the outer context 
- where conditions are imposed on some ancestor of the subterm. 

3.5.1. Inner contextual rewriting 
Consider for instance the term 

t = v div x (u°) dx+ u 1 div x (v) dx 

Jn Jn 

. ' . ' 

ti t 2 

and the Green rule 

/ Adiv x {B)dx = I ABdx- I V X (A).B dx. 
Jn Jon Jn 

A computation goal is that the term v (also called the test function, see Section 2) is 
no longer under a div operator. Thus the right strategy is to apply the Green rule to the 
second subterm t 2 of t, but not to its first subterm t\. The strategy 

TopDown(Transform(GreenRule)) it) 
is not satisfactory because it applies the rule to both t\ and ti- To solve this kind 
of problems we provide a transformation combinator InnerContext (patt) such that 
InnerContext(patt) (s) (expr) applies the transformation s to the expression expr if 
and only if expr has a subterm (at some arbitrary depth) which matches with the pattern 
patt. Otherwise it returns the exception "Fail". 

InnerContext (patt) (s) (expr) =de/ if 3t ' subterm of expr s.t patt <C t ' 

then s (expr) ; 
else FailO ; 

With this combinator the desired transformation in our example is 

TopDown (InnerContext (div (v , Y_) ) (GreenRule) ) . 
Then the transformation that applies the Green rule until no more v is under a div 
operator is obtained by application of the Normal izer combinator to the previous trans- 
formation. Step 8 in the Appendix B performs many applications of Green rules by a 
single call of this strategy, whilst avoiding any risk of non-termination usually associ- 
ated to Green rules. This example clearly illustrates the strength of the InnerContext 
combinator. 
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3.5.2. Outer contextual rewriting 

For an example of rewriting under an outer context, consider the term 

t = — J u B(div x (v)) dx — J —u B(div y (v)) dx + 0(e) 

ti t 2 

and the problem of approximating t\ and t^ so that to get a zero-order approximation 
of t. The rewrite rule ApproximationBl: B(w _) — > T*w + 0(e) is convenient for t\ 
but not for t^, due to the multiplicative factor i. For t^ a more precise rewrite rule 
ApproximationB2: B(w_) — > T*(w) + ey.T*{V x w) + eO(e) is required. Notice that both 
rules have the same left-hand side. Therefore the application of one of them to t in a 
top-down way would give an unwanted result. 

We propose a solution based on higher-order rewriting, i.e. the ability to apply rewrite 
rules to rules themselves in order to produce new rules. In the present example, the 
(second-order) rule 

multContext := X_ -t \XY _ 
could transform the (first-order) rule ApproximationB2 into the more precise (first-order) 
rule 

^B(w_)Y_ -> j (T*(w) + ey.T*(V x w) + eO{e)) Y_ 

that takes into account the useful part of the outer context, i.e. the multiplicative factor 
1 

6 ' 

We define the transformation constructor OuterContext as follows. Let context be 
a rewrite rule. The rule transformation OuterContext (r) (context) applies context to 
the left- and right-hand sides of the rewrite rule r and returns the resulting rule. In the 
example the rule 

r_epsilon := OuterContext (ApproximationB2) (multContext) 
provides a solution to the problem. After Maple simplifications, its value is 

-B(w_)Y_ -> (-T*(w) + y.T*{V x w) + 0(e))Y 

e e 

Notice that the presence of the variable Y_ in the right-hand side of the rule multContext 
is necessary. Otherwise the resulting rule r_epsilon would not be applicable if the term 
contains other factors than - and B(. . .). 
Finally, the desired transformation is 
Comp ( [ 

TopDown(Transf orm(r\_epsilon) ) , 
TopDown(Transf orm(ApproximationBl) )] ) . 



4. Convergence calculus 

The notions of weak and s trong convergence has be en already mentioned in Section 2. 
They have been introduced in Visintin Augustol ( 20061) . There, the convergence properties 
are expressed in terms of limits by sentences such as "if u e is strongly convergent towards 
u° and if v e is strongly convergent towards v , then u e + v e is strongly convergent towards 
u° + u°". In order to formalize these convergence properties and to handle them within a 
computational framework, we use a Landau-like 0(- ■ ■ ) notation and a set of computation 
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rules corresponding to the convergence properties. For instance the sentence u u £ strongly 
converges towards u°" is denoted by u £ = u° + 0(e). Then the former property is replaced 
by "if u £ = u° + 0(e) and v £ = v° + 0(e), then u £ + v £ = u" + v° + 0(e)" provided we 
apply the computation rule 0(e) + 0(e) = 0(e) from left to right. 

Under the name of convergence calculus this section defines a small system of axioms 
for the notion of strong convergence. This system is turned into a strongly normalizing 
rewrite system that will be systematically used to reduce expressions at each proof step. 
Before that, we present and address two problems arising when embedding this rewrite 
system within a computer algebra system with strict evaluation. 

4-1- 0(e) 's calculus 

If the notion of a function that tends to when e tends to is represented by the 
Maple expression 0(e), then Maple will simplify any expression 0(e) — 0(e) to zero. 
However 0(e) — 0(e) must be simplified to 0(e). 

The solution we suggest consists in considering the term 0(i, e) instead of 0(e), where 
i is a fresh index, "fresh" means that the same index has never been produced before 
to construct such a term. This solution is natural because it basically relies on the 
mathematical semantics of the term O(e). That is, two occurrences of O(e) are two 
different functions, and it is natural to distinguish them using two different indexes. 

Technically, we provide a function FreshlndexO that returns a new index at each 
call. Moreover each occurrence of O(e) in the right-hand side of a rewrite rule is replaced 
by 0(FreshIndex(),e). 

4-2. Fresh indexes and strict evaluation 

Another problem occurs when we declare an 0(e)-rule, i.e. a rewrite rule whose right- 
hand side contains some 0(FreshIndex(), e). The point is that Maple is a strict evalua- 
tion language. It completely evaluates all the sub-expressions of an expression before eval- 
uating the expression itself. In the present case it evaluates the function FreshlndexO 
at the declaration of the rewrite rule, which is obviously not the expected behaviour: if 
a transformation applies the rewrite rule more than once, two a priori different functions 
may be represented by the same term 0(i, e), where i is the result of the evaluation of the 
function FreshlndexO when the declaration statement of the rewrite rule is evaluated. 

The function FreshlndexO must be evaluated immediately after each application of 
an 0(£r)-rule. We suggest the following solution. First we introduce the evaluation rule: 

EvalRule : 0(F_,e) 0(F(),e) 

Second, the following two requirements have to be fulfilled: 

(REQ 1) for each declaration of an 0(e)-rule, replace each occurrence of 0(FreshIndex(), e) 
with 0(FreshIndex, e). Notice that Freshlndex is just a name and not a func- 
tion. 

(REQ 2) For each transformation term s that contains an 0(e)-rule r, replace each oc- 
currence of r with the transformation term Comp ( [r , TopDown (EvalRule)] ) . 
This term states that any application of r at the top is immediately followed 
by the application of EvalRule, which provokes a fresh index generation. 
Notice that Requirement (REQ 1) ensures that fresh indexes are not produced too early, 
and that Requirement (REQ 2) ensures that fresh indexes are not produced too late. 
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4-3. Convergence rewrite system 

The convergence rewrite system is composed of the following rewrite rules: —0{e) — > 
0(e), 0(e) + 0(e) -> 0(e), J u O(e) ds -> 0(e), and z x 0(e) -> O(e) for a term z 
bounded with respect to e. 

The Maple syntax for this system is given in Section C.2 in Appendix C. We empha- 
size that the condition "for a term z bounded with respect to e" imposes an additional 
constraint on the type of the term so that the rewrite rule can be applied. Types are 
not considered in this paper. The integration of an appropriate type system requires a 
separated work. 

It is easy to prove that the convergence rewrite system above is terminating. It is 
sufficient to notice that any application of a rewrite rule to a given expression pro- 
duces an expression with a smaller number of symbols. Therefore each rewriting se- 
quence with this system is finite. As shown in Section C.2 in Appendix C we group these 
rules with the Normalizer and Lef tChoice combinators. The resulting transformation 
ConvergenceStrategy is thus also terminating. 

5. Formal proof example 

As a typical example, we have implemented a formal proof of Proposition 3 with 
the symbtrans language. The corresponding sequence of transformations is reproduced in 
Appendix B. Table 1 establishes the link between the notations used in the mathematical 
proof and in the formal one. 



Mathematical notations 


Program notations 


T* 


TS 


fi 


TSTM( Omega) 


Y 


TSTm( Omega) 


y x v 


gradient (v,x) 


div x (v) 


div(v,x) 


Vn 


Eta (Omega) 


A.B 


ScalProd(A,B) 


0(e) 


BigO (Freshlndex , Epsilon) 


on 


partial (Omega) 


A x B (i.e. Cartesian product) 


[A, B] (i.e. Maple list) 



Table 1. Correspondence between mathematical and formal notations 

The proof-independent rewrite rules and transformation terms that correspond to two 
scale transform properties, convergence calculus, Green rules, and integral rules, and the 
proof-dependent ones that are the proof hypotheses and lemmas are separated in different 
Maple files. All these files are reproduced in Appendix C. 

The collection of mathematical functions and their behavior on the boundary of the 
region f2 is stored in an array named DnBoundary. The additional function LazyEval 
defined by 
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LazyEval(r) =def Comp( [ r ,TopDown(EvalRule)] ), 

where r is an (9(e)-rule, performs (REQ 2) explained in Section 4.2. 

An execution of this formal proof with Maple, after loading the symbtrans package 
and all the files reproduced in Appendix C, returns the expected result that the left- and 
right-hand sides of Equation (3) are equal modulo some 0(. ..,£). 

5.1. A generic constructor to express linearity 

We recall that an operator T is said to be linear if 

T(A v) = A T(v) (LI) 
T(v + w)= T(v) + T(w) (L2) 

where A is a scalar. 

At the present level of formalization, scalars are not distinguishable from other sym- 
bolic expressions. As a consequence Equation (LI) cannot be turned into a general rewrite 
rule: This rule could also produce the unexpected term v T(A). The scalar nature of the 
term A could be detected by assigning a type to each expression. Before adding a type 
system to address this problem, we write ad-hoc rules for this property. 

On the one hand Equation (L2) can be safely expressed by a rewrite rule. On the 
other hand the two-scale transform manipulates many linear operators and it is tedious 
to define a rewrite rule that expresses the linearity property (L2) for each operator. 
Therefore we provide the generic constructor Linear ity(n,fun,t), where n 6 {1, . . . , 
ariiy(t)}, fun is a function, and t is a term. This constructor generates a rewrite rule 
that states that the operator t is linear with respect to the n th argument of fun. Notice 
that fun is usually the + function. However it is possible to have many + depending on 
the nature of the involved terms. 

The following examples show how to express the (L2) linearity property of the Integral 
and T operators with respect to +. 

r 1 : = Linearity (2 , x->y->x+y , Integral (Omega_ , _ , Z_) ) ; 
r2 := Linearity (1 ,x->y->x+y ,T(_) ) ; 
A Maple eavluation produces the rules: 

> rl:=[Integral(Omega_,X_+Y_,Z_) , Integral(Omega,X,Z)+Integral(Omega,Y,Z)] ; 

> r2:=[T(X_+Y_) , T(X)+T(Y)] ; 

For a given operator, the two rewrite rules that correspond to the properties (LI) and 
(L2) can be regrouped together using transformation combinators, see for instance the 
linearity of the integral in Appendix C, Section C.4. The collection of linear operators as 
well as their linearity property is stored in an array named Linear ityOf. 



6. Related work 



The proposed transformation language does not claim for originality. It is deliberately 
an ad aptation f or Maple of popular strategy languages such as p-log (jMarin and Piroi 



(|2004h ) or Tom (jBalland et all (|2007f )). But, departing from TOM which extends an host 
language with an additive syntax, our transformation language smoothly integrates with 
standard Maple functions. Consequently, the Maple programmer learns it quickly, is free 
to mix function- and rule-based programming styles. Moreover all the features of her 
development environment (such as refactoring, code completion, dependency analyses, 
etc) are preserved for free. 
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Th e common theoretical basis for this work and all the related ones is the p-cube (jCirstea et al 



(2001)), an extension of the A-cube where rewriting rules extend function abstractions, 
with the same hierarchy of type systems. For the moment our transformation language 
corresponds to the untyped version of the p-cube, called the p-calculus, but we intend to 
extend it with a powerful type system to address identified issues related to the variety of 
types of mathematical expressions. In the p-calculus the abstraction mechanism is based 
on the rewrite rule I —> r, viewed also as a p-term. Notice that when I is just a variable x, 
this p-term corresponds to the A-term Xx r. In other words, in the p-calculus we abstract 
on a pattern rather than on a single variable. When an abstraction I — > r is applied to a 
p-term i, which is denoted by [I — > r]t, the matching mechanism is based on the binding 
of the free variables of I to the appropriate subterms of t. This is exactly the principle of 
the transformation language symbtrans, see Section 3, and Definition 1. 

In the p-calculus this matching of I with t can be done modulo a theory T. The latter 
is often expressed by algebraic axioms such as associativity and/or commutativity. In our 
language symbtrans, the function Matching(ti) (t2) performs syntactic matching modulo 
associativity and commutativity of the Maple product and sum operators, since symbtrans 
is basically designed to perform transformations over mathematical expressions. 

Finally notice that in the symbtrans language, if a rule cannot be applied to a term 
then the exception Fail is raised. This makes a subtle difference with the semantics 
of the p-calculus that consists in returning an empty set in this case. The problem of 
the p-calculus approach is that we can not distinguish between an empty set which is a 
mathematical term that could arise from the symbolic transformations, and the empty 
set which denotes the failure of the application of a rule. 

The closest implementation is p-log, a package developed upon the advanced rewrit- 
ing kernel of Mathematica. It supports non-determinism and conditional rewriting. The 
main drawback of p-log is that it considers the non-applicability of a rule as the identity. 
Technically speaking, the strategy FailAsIdentity is implicitly applied to all the trans- 
formations. However, when a transformation returns the same term given as an input, 
we do not know if this transformation fails or it performs some modifications and then 
returns the same term. Moreover in p-log it is not possible, at least in a straightforward 
way, to do higher-order rewriting, since the rewriting rules are not directly accessible to 
the user: They are declared by means of the constructor DeclareRule. 



7. Conclusion 

Our first motivation for the development of a transformation language in Maple was 
to provide Maple users with concise means to express usual repetitions of rule-based 
symbolic computations. Since the symbtrans package is written in Maple, it obviously 
does not extend the expressivity of the Maple language, but it clearly increases readability 
and conciseness. 

The transformation language symbtrans allows writing a formal proof of the weak 
convergence property of the gradient at the same "level" as the paper mathematical 
proof. The word "level" covers many aspects: (1) the two proofs have almost the same 
size, (2) they follow the same steps, and (3) the strategy term written at each step of the 
formal proof is a natural formalization of its mathematical counterpart. 

The first objective is fulfilled, that is, to provide the mathematician with a transfor- 
mation language for the formalization of equational reasoning. The main benefit is a high 
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guarantee of the correction of all the proof steps. Many of the weakenesses of the present 
proposal can be eliminated by combining transformations with an adequate type system. 
A future work will be to design such a type system. 

Though this paper presents an implementation in Maple, the transformations pre- 
sented here could easily be developed in a similar way in any functional language. 
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A. A mathematical proof of the gradient weak convergence property 



Here we follow the proof in iLenczner and Smith! (|2007l) . However we admit that u is 



independent of y, that y >— > u (x, y) is y-periodic, and a number of other intermediary 
results. We state them first as lemmas, then present the main part of the proof. In 
Appendix B we show its formalization by rewriting rules and strategies. 

Here T is viewed as a continuous operator from L 2 (fi) into L 2 (fi xY), so its adjoint 
T* is a continuous operator from L 2 (fl x Y) into L 2 (Vt) defined by 

/ Tu v dxdy = u T*v dx for any u G L 2 (il) and v € L 2 (Q. x Y). 
JnxY Jn 

We define the so-called regularization operator B : L 2 (il x Y) — > L 2 (Vt) by Bv(x) = 
v(x, x/e). 

Lemma 8. The adjoint operator T* can be approximated by B at the zero order, 

T*v = Bv + 0(e), 

where 0(e) is a function which vanishes in the L 2 (£l)-norm when e vanishes. 

Lemma 9. The regularization operator B can be approximated at the zero order and at 
the first order, 

Bv = T*v + 0(e) and Bv = T*(v + ey.V x v) + eO(s), 
where 0(e) is a function which vanishes in the L 2 (ft) -norm when e vanishes. 

We observe that the notation 0(e) refers indifferently to a function or to a scalar. We 
shall use the common rules —0(e) = O(e), O(e) + 0(e) = O(e) and for a term z bounded 
with respect to e, z x 0(e) — 0(e). 

To simplify the notations, we write in the following u instead of u e . We shall prove 
T(Vu).v dxdy = / (V x u° + WyU 1 )^ dxdy + O(e) 



y L 

SlxY JilxY 



for any test function v £ C°°(f2 x Y) vanishing on the boundaries. 

• Step 1. Applying the definition of T* to the expression yields 

* = / Vu.T*(v) dx. 
Jn 

• Step 2. Approximating T*v thanks to Lemma 8 and using the linearity of an integral, 



* = / Vu.Bv dx+ Vu.O(e) dx 
Jn Jn 

= / Vu.Bv dx + 0(e). 



n 
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Step 3. Then, we apply the Green rule and get 

^ = u (Bv.uq) ds(x) — / u div x (Bv) dx + 0(e), 
Jon Jn 

where nn denotes the unit outward normal vector to the boundary d£l of f2. Since v 
vanishes on the boundary of f2 x Y, then Bv vanishes on dfl and it remains 

* = - u div x (Bv) dx + O(e). 
Jn 

Step 4. From the straightforward equality div(Bv) = Bdiv x v+jBdiv y and by linearity 
of the integral, 



and 



* = — f u (Bdiv x v + -Bdivyv) dx + 0(e), 
Jn £ 

if> = — [ uBdiv x v dx — I -uBdiVyV dx+0(e). 
Jn Jn £ 

V v ' V v ' 

Step 5. We apply Lemma 9 to approximate Bdiv x v at the zero order and Bdiv y v at 
the first order: 



#i = / uT*(div x v)dx + 0(e), 
Jn 



and 



\&2 = f —u [T*(div y v + ey.\7 x div y v) + eO(e)]dx. 
Jn £ 

Using the linearity of the integral, 

* 2 = / - u T*(div y v + ey.V x div y v) dx + 0(e). 
Jn £ 

Using the linearity of T*, 

\I>2 = / u T*(-div y v + y.V x diVyv) dx + 0(e). 
Jn e 

So, 

>!' = —/ u T* (div x v) dx — [ uT*(- diVyV + y.V x div y v) dx + 0(e). 
Jn Jn £ 

Step 6. From the definition of the dual operator T* of T, 

^ = — I Tu div x v dxdy — j Tu (-div y v + y.V x div y v) dxdy + 0(e). 
JnxY JnxY £ 

* = — j Tu div x v dxdy— j Tu -div y v dxdy— j Tu y.V x div y v dxdy+0(e). 
JnxY JnxY 6 JnxY 

Step 7. We use Assumptions Tu = u° + 0(e) and Tu = u° + eu 1 + ey.\7 x u° + eO(e) 
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respectively in the first and third integrals and in the second integral and get 

<J> = - / (u° + 0(e)) div x v dxdy 
JnxY 

— I (m° + eu 1 + ey.\7 x u a + eO(e))-div y v dxdy 
JnxY £ 

(u° + 0(e)) y.V x div y v dxdy + 0(e). 



fixr 



After simplification 

if> = — [ u° div x v dxdy — f -u°div y v dxdy 
JnxY JnxY £ 

— / i^diVyV dxdy — / y.\7 x u°div y v dxdy 
JnxY JnxY 

— / u°y.\7 x div y v dxdy + 0(e). 
JnxY 

• Step 8. On the second subterm of ^, let us apply the following instance of the Green 
formula: 

/ u°div y v dxdy = / u a v.ny dxds(y) — / V y u°.u dxdy, 
JnxY JnxdY JnxY 

where ny stands for the unit outward normal vector to the boundary dY of Y. Re- 
marking that V y u° vanishes and that v vanishes on dY, the second subterm vanishes 
and it remains 

^ = — / u° div x v dxdy 
JnxY 

— / v}div y v dxdy — / y.\7 x u°div y v dxdy 
JnxY JnxY 

— / u°y.V x div y v dxdy + 0(e). 
JnxY 

• Step 9. Similarly, repeating the Green rule application many times, 

= — / u° v.n x ds(x)dy + / V x u°.v dxdy 

JdnxY JnxY 

- / ii 1 u.n y dxds(y) + / Vyii 1 .?; dxdy 

JnxdY JnxY 

- / y.\7 x u°v.n y dxds(y) + / V^j/.V u°.v dxdy 
JnxdY JnxY 

- / u°v.n y (y.n x ) ds(x)ds(y) + / V y u°.v (y.n x ) ds(x)dy 

JdnxdY JdnxY 

+ / y.y x u° v.n y dxda(y) - I \7 y (y.\7 x u°) v dxdy + 0(e). 
JnxdY JnxY 
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Since v vanishes on all boundaries, 

* = / Vxii% dxdy 
JnxY 

+ / VyU 1 .v dxdy 
JnxY 

+ / \7 v y.\7 x u°.v dxdy 
JnxY 

- V y (y.V x u").vdxdy + 0(e), 

JnxY 

or after simplification, 

* = / V x u° .v dxdy + / VyU 1 .v dxdy + 0(e). 
JnxY JnxY 

B. A formal proof of the gradient weak convergence property with symbtrans 

# Initial term 
LHSterm := Integral ( 

[TSTM (Omega) ,TSTm( Omega)] , 
ScalProd(T (gradient (u,{x>)) ,v) , 
{x,y}); 

# Step 1 

LHSterm := Transf orm(TwoScaleAdjointlnv) (LHSterm) ; 

# Step 2 

LHSterm := TopDown(LazyEval (Transf orm(ApproximationTS [1] ))) (LHSterm) ; 
LHSterm := IntegrationStrategy (LHSterm) ; 
LHSterm := ConvergenceStrategy (LHSterm) ; 



# Step 3 
LHSterm 
LHSterm 
LHSterm 



TopDown(GreenRule) (LHSterm) ; 

TopDown (Transf orm(IntegralOnBoundary [B [v] ] ) ) (LHSterm) ; 
IntegrationStrategy (LHSterm) ; 



# Step 4 

LHSterm := TopDown (Transf orm(BarBasicPropertyDiv) ) (LHSterm) ; 
LHSterm := evala (Expand (LHSterm) ) ; 
LHSterm := IntegrationStrategy (LHSterm) ; 

# Step 5 

multContext := [X_ , (l/Epsilon)*X*Y_] ; 

ApproximationTSInv2Context := OuterContext (Approximations [2] ) (multContext) ; 
LHSterm := TopDown (LazyEval (Transf orm(ApproximationTSInv2Context) ) ) (LHSterm) ; 
LHSterm := TopDown (LazyEval (Transf orm(ApproximationB [1] ))) (LHSterm) ; 
LHSterm := evala (Expand (LHSterm) ) ; 
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LHSterm := TopDown(Transf orm(LinearityOf [TS] ) ) (LHSterm) ; 

LHSterm := evala (Expand (LHSterm) ) ; 

LHSterm := IntegrationStrategy (LHSterm) ; 

LHSterm := ConvergenceStrategy (LHSterm) ; 

#Step 6 

LHSterm := TopDown(Transf orm(TwoScaleAdjoint) ) (LHSterm) ; 
LHSterm := evala (Expand (LHSterm) ) ; 

#Step 7 
#Recall that : 

multContext := [X_,X*(l/Epsilon*Y_)] ; 

ApproximationT2Context : = OuterContext (Approximation! [2] ) (multContext) ; 
LHSterm := TopDown(LazyEval (Transf orm(ApproximationT2Context) )) (LHSterm) ; 
LHSterm := TopDown(LazyEval (Transf orm(ApproximationT [1] )) ) (LHSterm) ; 
LHSterm := evala (Expand (LHSterm) ) ; 
LHSterm := IntegrationStrategy (LHSterm) ; 
LHSterm := ConvergenceStrategy (LHSterm) ; 

#Step 8 

LHSterm := Normalizer( 
TopDown( 
Comp( 
[ 

InnerContext(div(v,X_)) (GreenRule) , 

Comp( [TopDown(IntegralOnBoundary [v] ) , IntegrationStrategy] ) 

] 
) 

) 

) (LHSterm) ; 

LHSterm := TopDown (Transf orm(UIndependentOf Y) ) (LHSterm) ; 
LHSterm := IntegrationStrategy (LHSterm) ; 

# Right-hand side term 
RHSterm := Integral ( 

[TSTM (Omega) ,TSTm(Omega)] , 

ScalProd (gradient (uO , set (x) ) + gradient (ul , set (y) ) ,v) , 
{x,y})+BigO(FreshIndex() .Epsilon) ; 
RHSterm := IntegrationStrategy (RHSterm) ; 

Result := ConvergenceStrategy (LHSterm-RHSterm) ; 

C. Rule and transformation files 

C.l. Two- scale method rules 
File twoscale .mpl. 
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# Properties of the operators T, TS and B. 

LinearityOf [TwoScaleAdd] := Linearity (1 ,x->y->x+y,T(A_) ) ; 

TwoScaleGradient := [ 
T (Gradient (V_, X_) ) , 
l/Epsilon*Gradient(T(V) ,{y»] ; 

TwoScalelntegral := [ 
Integral (Omega_ , V_ , {X_}) , 

Integral ({TSTM (Omega) ,TSTm(Omega)},T(V) ,{X,y»] ; 

TwoScaleAdjoint := [ 
Integral (Omega_, TS(V_)*W_ , {X_» , 

Integral ([TSTM (Omega) , TSTm (Omega) ] , V*T(W) , {X, y})] ; 

TwoScaleAdjointlnv := [ 
Integral ( [TSTM (Omega_) , TSTm(Omega_)] , ScalProd(T(W_) ,V_) , {X_ , Z_}) , 
Integral (Omega, ScalProd(W,TS(V)) , {X})]; 

BarBasicPropertyDiv := [ 
div(B(V_) ,X_) , 

B(div(V,X)) + 1 / Epsilon*B(div(V,{y}))] ; 

ApproximationTS := [ 

[TS(V_) ,B(V)+ BigO(FreshIndex,Epsilon)] , 
[ TS(V_), TS(V) + Epsilon * TS(y*gradient(V,{x}))+ 
Epsilon * BigO(FreshIndex, Epsilon)] 

]; 

ApproximationB := [ 

[B(V_) , TS(V)+BigO(FreshIndex, Epsilon)] , 
[B(V_), 

TS ( V+Epsilon*ScalProd (y , gradient ( V , {x} ) ) ) + 
Epsilon*BigO (Freshlndex , Epsilon) 

] 

]; 

LinearityOf [B] := [B(0),0]; 

# The following rule is difficult to generalize. 

# We need to include, propagate and check 

# the type of expressions and operators . 

LinearityOf [TS] := [A_*(l/Epsilon)*TS(V_) ,A*TS(l/Epsilon*V)] ; 
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C.2. Convergence rules 



File convergence .mpl. 
OEpsilonSumO := [ 
BigO(I_,Epsilon) + BigO(J_,Epsilon) , 
BigO(FreshIndex,Epsilon)] ; 

OEpsilonSuml := [ 
BigO(I_,Epsilon) + BigO(J_,Epsilon)+X_, 
BigO(FreshIndex,Epsilon)+X] ; 

OEpsilonlntegral := [ 
Integral (Omega_ , BigO(I_,Epsilon) , X_) , 
BigO(FreshIndex,Epsilon)] ; 

# Only if A_ does not depend on Epsilon. 
OEpsilonConst := [ 

A_ * BigO (I_, Epsilon) , 
BigO(FreshIndex, Epsilon)] ; 

OEpsilonScalar := [ 
ScalProd(A_, BigO (I_, Epsilon) ) , 
BigO(FreshIndex, Epsilon)] ; 

# Only if A_ does not depend on Epsilon. 
EpsilonConst : = [ 

A_ * Epsilon, 

BigO(FreshIndex, Epsilon)] ; 

ConvergenceStrategy := 
Normalizer ( 
Lef tChoice ( 
[ 

IdentityAsFail (TopDown(LazyEval (OEpsilonSumO) ) ) , 
IdentityAsFail (TopDown(LazyEval (OEpsilonSuml) ) ) , 
IdentityAsFail (TopDown(LazyEval (OEpsilonlntegral) ) ) , 
IdentityAsFail (TopDown(LazyEval (OEpsilonConst) ) ) , 
IdentityAsFail (TopDown(LazyEval (EpsilonConst) ) ) , 
IdentityAsFail (TopDown(LazyEval (OEpsilonScalar) ) ) 

] 

) 

); 

File LazyEval .mpl. 
EvalRule := [BigO(F_, Epsilon) ,BigO(F() .Epsilon)] ; 

LazyEvalGen := r -> evalRule -> Comp( [r ,TopDown(evalRule)] ) ; 
LazyEval := r -> LazyEvalGen (r) (EvalRule) ; 
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C.3. Green rules 



File Green. mpl. 

# Three instances of the Green rule are regrouped into 

# one by transformation combinators. 

GreenRulel : = [ 
Integral (Omega_ , ScalProd (gradient (U_,X_) ,V_) ,Y_) , 
Integral (partial ( [Omega, X] ) ,U*ScalProd(V,Eta(X) ) ,s(X)) 

- Integral (Omega, U* div(V.X) ,Y)] ; 

GreenRule2:=[ 
Integral (Omega_ , div (U_ , X_) *V_ , Y_) , 

Integral (partial ( [Omega, X] ) , V*ScalProd(U,Eta(X) ) ,s(X)) 

- Integral (Omega, ScalProd (gradient (V,X) ,U) ,Y)] ; 

GreenRule3 : = [ 
Integral(Omega_,U_*ScalProd(y,gradient(V_,X_)) ,Z_) , 
Integral (partial ( [Omega , X] ) , U*V*ScalProd (y , Et a (X) ) , s (X) ) 

- Integral (Omega, V* ScalProd(y .gradient (U,X) ) ,Z)] ; 

GreenRule : =IdentityAsFail (Lef tChoice ( 
[GreenRulel , GreenRule2 , GreenRule3] ) ) ; 

C4- Domain integral rules 

File integral .mpl. 

# Rules for the classical integral properties. 

LinearityOf [Integral] : =Lef tChoice ( [ 

Linearity (2 , x->y->x+y , Integral (Omega_ , A , Z_) ) , 
[Integral (Omega_ , ,X_) ,0] 

] ) ; 

IntegrationStrategy := 
Normalizer ( 
TopDown( 
IdentityAsFail ( 
Lef tChoice ( 
[ 

IdentityAsFail (LinearityOf [Integral] ) , 
LinearityOf [ScalProd] 

] 

) 

) 

) 

); 
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C.5. Hypotheses 

File hypothesis .mpl. 

# Behavior of v on the boundary. 

# VOnBoundary 
OnBoundary [v] : = [v , 0] ; 

BoundaryContext := [X_ , Integral (partial (Domaine_) , Y_*ScalProd(X,M_) ,Z_)] ; 

# Integral of v in the boundary 

IntegralOnBoundary [v] : = OuterContext (OnBoundary [v] ) (BoundaryContext) ; 

# Behavior of B(v) on the boundary. 
BContext := [X_,B(X)]; 

OnBoundary [B [v] ] := convert (TopDown (Transform (Linear ityOf [B] ) ) 

(OuterContext (OnBoundary [v] ) (BContext)) ,list) ; 

IntegralOnBoundary [B [v] ] : = OuterContext (OnBoundary [B [v] ] ) (BoundaryContext) ; 

# u is independent of y. 
UlndependentOfY := [ 

gradient (Const_*u0,{y>) , 

] ; 

C. 6. Lemmas 

File lemmas .mpl. 

# Zero- and first- order approximations of T. 
Approximation! := [ 

[T(u), 

uO + BigO(FreshIndex,Epsilon)] , 
[T(u), uO + Epsilon*ul + Epsilon*ScalProd(y,gradient(uO,{x>)) 
+ Epsilon*BigO (Freshlndex , Epsilon) ] 

] ; 
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